Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier: 86nDVBLkrYGbN4dQfTwvD/DQ2qinBEgTw7/MjJzBLQc=
Subject key identifier: 60:FA:72:C8:BE:5C:6B:CB:BD:50:F0:E0:BC:72:0C:C3:8A:6E:56:8B
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 0194BC04C1C86064C6D5FA179C9FBDFF34ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: shoP/XYJEAIIBEOVdkPKroyM2bv79xDGHIHuTExIcqs=)
2: l3wz3kxvyE3dLi_otf1H964v_ag.roa (hash: EFAbZ5XqN3YjWYZwMd/7NbegJtXwuA7JeIY2LVho3FU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c1:c8:60:64:c6:d5:fa:17:9c:9f:bd:ff:34:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=60fa72c8be5c6bcbbd50f0e0bc720cc38a6e568b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:d9:68:44:7a:e2:e1:2d:13:99:db:b9:22:
f2:b3:35:49:f0:4a:b8:45:c3:ad:e5:17:ef:2b:f8:
d2:75:69:7e:38:74:cc:a3:de:a7:82:fd:88:aa:e2:
85:67:8f:01:61:c5:a9:33:b4:8d:ed:27:29:85:fd:
75:00:6a:b9:14:d7:d6:32:ea:19:7e:b2:39:8c:fe:
e7:00:55:1a:9f:a9:ba:84:3b:7e:3d:09:26:19:3c:
93:98:27:8c:76:f8:1a:f2:0f:87:20:13:34:17:73:
9c:20:a1:a7:06:5b:4e:32:12:cb:44:66:38:97:90:
c2:57:5b:8d:55:d4:5f:80:a6:e9:cd:79:5c:16:f0:
ee:26:f5:f5:10:89:16:66:aa:c9:fe:33:4d:d0:c8:
66:d4:79:62:49:5c:65:dc:54:3c:cd:10:d4:7d:0a:
d1:d1:41:45:5a:39:58:fd:82:8f:07:e9:8f:af:ee:
d8:6e:b0:07:52:7d:75:a0:5a:3e:2d:78:dc:5f:a0:
4b:7e:88:87:3f:bd:f3:bb:8a:8d:f0:c6:83:62:c3:
0e:6a:ff:fd:3e:34:63:cc:64:f8:19:ca:c6:e3:2f:
d9:3c:4a:13:c5:01:c9:74:1c:bf:ef:59:23:72:22:
f8:c3:6f:74:fa:09:44:7e:36:36:73:14:6a:da:c4:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FA:72:C8:BE:5C:6B:CB:BD:50:F0:E0:BC:72:0C:C3:8A:6E:56:8B
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:51:d8:c0:f3:8b:07:b3:80:6a:64:2c:a1:41:12:bb:11:70:
9d:fb:fb:6f:09:30:8f:11:e5:71:cc:5b:0d:df:2f:a2:20:ad:
2a:1d:72:83:ac:3a:4b:5e:16:6d:c6:79:b6:14:c5:90:71:81:
db:0d:e3:53:34:d3:6c:44:97:64:30:a6:19:5e:84:fc:76:32:
1e:67:a2:88:9e:86:df:03:84:a2:36:af:60:aa:20:69:d0:58:
9e:bb:8f:93:c3:89:db:18:fd:63:1c:ea:24:25:c0:45:65:ec:
42:29:27:38:91:18:c1:61:8e:56:e1:0d:42:de:1a:e1:e2:1e:
62:7d:2c:fb:a1:f4:38:93:4e:7a:42:22:c1:c7:14:4f:29:6b:
43:7c:61:f9:67:ca:35:db:1d:ad:09:e6:61:a2:af:3f:58:72:
c4:c7:9c:1d:e7:0e:c7:b4:0a:14:9c:d1:a9:c1:44:3b:2b:af:
90:6c:40:e5:ff:70:e4:3a:84:5e:26:ad:65:11:49:78:59:cf:
37:1d:ab:dd:4b:51:14:cf:6d:61:45:9b:db:91:9b:c0:7e:38:
6b:da:ee:57:27:41:90:8e:c8:99:01:fe:2a:fd:95:04:21:52:
29:0c:04:da:57:d7:a5:5d:00:62:d1:42:68:13:d6:8c:e1:38:
93:1c:9f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:43 2025 by rpki-client